Addendum means this document and its annexures.
Appropriate Security Measures means any technical and organisational measures to protect the Personal Data that are necessary to ensure a level of security appropriate to the risk, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons.
Associates means the officers, employees, agents and contractors of a party.
Contracted Processor means #company# or a Subprocessor.
Data Protection Laws means any privacy or data protection laws (including any statutes, regulations, by-laws, ordinances, mandatory codes of conduct or rules of common law or equity), including the EU Data Protection Laws and the UK Data Protection Laws, which applies to the relevant party.
EU means the European Union.
EU Data Protection Laws means the GDPR, and any EU member state law which modifies the application of the GDPR, as amended, replaced, or superseded from time to time.
GDPR means EU General Data Protection Regulation 2016/679.
Kennedys Group Firms means Kennedys or any firm authorised by Kennedys to use the name “Kennedys”. A full list of Kennedys Group Firms is available at www.kennedyslaw.com/regulatory.
Kennedys Group means Kennedys and the Kennedys Group Firms.
Personal Data means any personal data processed by a Contracted Processor on behalf of a Kennedys Group Firm pursuant to or in connection with the Principal Agreement.
Regulator means any government authority or regulator which is responsible for administering and enforcing a Data Protection Law, and includes a supervisory authority under the GDPR.
Restricted Transfer means a cross-border transfer of Personal Data:
(a) from a Kennedys Group Firm to a Contracted Processor; or
(b) from one Contracted Processor to another Contracted Processor or between two establishments of a Contracted Processor,
where such transfer would be prohibited by a Data Protection Law unless the parties to that transfer agree to the Standard Contractual Clauses.
Standard Contractual Clauses means the standard contractual clauses (controller to processor) approved by EC Decision 2010/87/EU, as amended, replaced, or superseded from time to time, including by an equivalent decision under the GDPR or the UK GDPR (as applicable).
Subprocessor means any person appointed by #company# to process the Personal Data on behalf of a Kennedys Group Firm (including any third party or any related company of #company# but excluding employees or individual contractors of #company#).
UK Data Protection Laws means the UK GDPR, and any UK law which modifies the application of the UK GDPR, as amended, replaced, or superseded from time to time.
UK GDPR means the GDPR as incorporated into the law of the United Kingdom by the European Union (Withdrawal) Bill 2018 (UK) and as amended, replaced, or superseded from time to time.